1732 matches found
PHP-Nuke 1.02.53.04.x5.x6.x7.x - Multiple Vulnerabilities
PHP-Nuke 1.02.53.04.x5.x6.x7.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10595/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting, HTML...
PHP-Nuke 6.x/7.x - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple cross-site scripting vulnerabilities...
PHP-Nuke 6.x/7.x Reviews Module - 'order' SQL Injection
source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple cross-site scripting vulnerabilities...
PHP-Nuke 6.x/7.x Reviews Module - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple cross-site scripting vulnerabilities...
PHP-Nuke 6.x/7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple cross-site scripting vulnerabilities...
PHP-Nuke 6.x/7.x FAQ Module - 'categories' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple cross-site scripting vulnerabilities...
PHP-Nuke 6.x7.x Reviews Module - Multiple Cross-Site Scripting Vulnerabilities
PHP-Nuke 6.x7.x Reviews Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the...
PHP-Nuke 6.x7.x Reviews Module - order SQL Injection
PHP-Nuke 6.x7.x Reviews Module - order SQL Injection source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is...
PHP-Nuke 6.x7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities
PHP-Nuke 6.x7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues ca...
PHP-Nuke 6.x7.x FAQ Module - categories Cross-Site Scripting
PHP-Nuke 6.x7.x FAQ Module - categories Cross-Site Scripting source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nu...
PHP-Nuke 6.x7.x - Multiple Input Validation Vulnerabilities
PHP-Nuke 6.x7.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuk...
Multiple vulnerabilities PHP-Nuke
original advisory : http://bichosoft.webcindario.com/advisory-05.txt ------------------------------------------------------------------------------------------------- :.: Multiple vulnerabilities PHP-Nuke :.: PROGRAM: PHP-Nuke HOMEPAGE: http://phpnuke.org/ VERSION: 6.x, 7.2, 7.3 BUG: Multiple...
[Squid 2004-betaNC-001] Inadequate Security Checking in NukeCops betaNC Bundle
=========================================================================== =========================================================================== Advisory: 2004-betaNC-001 Affected Software: Nuke Cops betaNC PHP-Nuke Bundle w/ PHPNuke 6.5 and later Affected Versions: all cvs versions Main...
CVE-2004-2044
PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi PHP function with $SERVER'PHPSELF' to identify the calling script, which allows remote attackers to directly access scripts,...
PHP-Nuke 5.x/6.x/7.x - Direct Script Access Security Bypass
source: https://www.securityfocus.com/bid/10447/info PHP-Nuke is affected by a direct script access security vulnerability. This issue is due to a failure to properly validate the location and name of the file being accessed. This issue will allow an attacker to gain access to sensitive scripts...
PHP-Nuke 5.x6.x7.x - Direct Script Access Security Bypass
PHP-Nuke 5.x6.x7.x - Direct Script Access Security Bypass source: https://www.securityfocus.com/bid/10447/info PHP-Nuke is affected by a direct script access security vulnerability. This issue is due to a failure to properly validate the location and name of the file being accessed. This issue wi...
PHP-Nuke 6.x/7.x - 'Modpath' File Inclusion
source: https://www.securityfocus.com/bid/10365/info PHP-Nuke is prone to a potential file include vulnerability. This issue could allow a remote attacker to include malicious files containing aribtrary code to be executed on a vulnerable system. This issue can be exploited via the 'modpath'...
PHP-Nuke 6.x7.x - Modpath File Inclusion
PHP-Nuke 6.x7.x - Modpath File Inclusion source: https://www.securityfocus.com/bid/10365/info PHP-Nuke is prone to a potential file include vulnerability. This issue could allow a remote attacker to include malicious files containing aribtrary code to be executed on a vulnerable system. This issu...
CVE-2004-1999
Cross-site scripting XSS vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the 1 ttitle or 2 sid parameters to modules.php...
CVE-2004-2000
SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL via the 1 orderby or 2 sid parameters to modules.php...